UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-125801

WordPress WooCommerce plugin 11.0.0-11.2.2 - Race Condition vulnerability

Severity
Medium 6.5
Published
13 Nov 2026
Last changed
13 Nov 2026
Added to UpHeron
13 Nov 2026
Weakness
Race condition (CWE-362)
Attack
Over the network · Only under certain conditions · No login needed · No user action needed
Attacker can
Read data · Change some data
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Sources
CVE Program

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Automattic WooCommerce woocommerce allows Leveraging Race Conditions.This issue affects WooCommerce: from 11.0.0 through 11.2.2.

From the CVE Program.

Affected software

SoftwareAffected versions
WooCommerceWordPress plugins · wp-plugin:woocommerce
  • From 11.0.0 up to 11.2.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-125801